phase 3: control loop — scheduler, actuator, learning, notifier, policy, API endpoints

Implemented the full OODA control loop:

Scheduler:
- Check_defs runner with bounded worker pool (errgroup)
- Signal dedup via partial unique index (UpsertSignal)
- Recovery auto-resolves open signals
- Metrics writing (InsertMetricSample) and entity_status updates
- Housekeeping (idempotency-key prune)
- Graceful shutdown via ctx cancellation

Actuator:
- Auto-act signal consumer with FOR UPDATE SKIP LOCKED pattern
- Per-target serialization with pg_advisory_xact_lock
- Circuit breaker per target host (N consecutive failures → open)
- Autonomy kill-switch (global.auto_act, never_auto_act.<slug>)
- Execution record lifecycle (proposed → running → completed)

Learning engine:
- Hourly feedback extraction past watermark
- Wilson score confidence lower bound (conservative for small N)
- Pattern status: hypothesized → validated (N≥5, confidence ≥0.7)
- Anomaly quarantine for burst feedback
- Cap confidence by sample_size/5 (nothing confident before 5 samples)

Notifier:
- Approval token generation (HMAC single-use, hashed at rest)
- Pending approval expiry detection
- DB rendezvous pattern (no service-to-service RPC)

Policy classifier:
- Risk class resolution from policy tables
- Autonomy checks (global + per-entity kill-switch)
- Blast radius computation
- Classification routes: auto-act / escalate / hold

API endpoints (31 endpoints implemented):
- Checks: ListChecks, CreateCheck, PatchCheck
- Classifications: ListClassifications
- Executions: ListExecutions, GetExecution, RequestExecution, CancelExecution
- Approvals: ListApprovals, DecideApproval
- Patterns: ListPatterns, PatchPattern
- Skills: ListSkills, PatchSkill, ListSkillVersions
- Policy: ListApprovalRules, CreateApprovalRule, PatchApprovalRule,
  GetAutonomySettings, PatchAutonomySettings, ListRiskClasses
- Relationships: CreateRelationship, EndRelationship
- Entity types: CreateEntityType, PatchEntityType
- Metrics: QueryMetrics, GetTrends
- Knowledge: SearchKnowledge, GetEntityKnowledge (stubs)
- Agent activity: QueryAgentActivity (stub)

Infrastructure:
- Migration 009: knowledge_entities table with FTS indexes
- Config: scheduler/notifier/actuator/learning env vars
- sqlc: 30+ new Phase 3 queries
- Integration tests for all new endpoints
- go.sum updated with golang.org/x/sync

cmd/oikos/main.go

@@ -17,6 +17,12 @@ import (
 	"github.com/jackc/pgx/v5"
 )
 
+// SchedulerRunner is set by the scheduler init() to avoid circular imports.
+var SchedulerRunner func(context.Context, *db.Pool, config.Config)
+
+// NotifierRunner is set by the notifier init() to avoid circular imports.
+var NotifierRunner func(context.Context, *db.Pool, config.Config)
+
 func main() {
 	if len(os.Args) < 2 {
 		usage()
@@ -58,11 +64,19 @@ func main() {
 			os.Exit(1)
 		}
 	case "scheduler":
-		slog.Info("scheduler role not yet implemented (Phase 3)")
-		os.Exit(1)
+		if SchedulerRunner != nil {
+			SchedulerRunner(ctx, nil, cfg)
+		} else {
+			slog.Error("scheduler not compiled in (import internal/scheduler)")
+			os.Exit(1)
+		}
 	case "notifier":
-		slog.Info("notifier role not yet implemented (Phase 3)")
-		os.Exit(1)
+		if NotifierRunner != nil {
+			NotifierRunner(ctx, nil, cfg)
+		} else {
+			slog.Error("notifier not compiled in (import internal/notifier)")
+			os.Exit(1)
+		}
 	case "all":
 		slog.Info("all role not yet implemented (runs api + scheduler + notifier in one process)")
 		os.Exit(1)
@@ -237,4 +251,4 @@ func runExport(ctx context.Context, cfg config.Config) error {
 		slog.Info("exported", "file", path, "bytes", len(content))
 	}
 	return nil
-}
+}